Limit Download and Upload on WAN for every VLAN

Regarding your question here:

When looking at the numbers, it looks like you are not being matched by class 12, but by default. I guess the first thing I would do is to check the IP address of that client is within 192.168.1.0/24.